$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/93dfc3bb-6270-37ee-84a7-28f137075c1e.roa File: 93dfc3bb-6270-37ee-84a7-28f137075c1e.roa (raw, json) Hash identifier: S4vnxRUXK4eDJSY5Q7C3sGekOvjcTbjGXDLAZtgZVc0= Subject key identifier: 15:7B:19:5E:B2:E0:99:B2:F6:50:E1:53:EC:BF:BA:B0:85:94:F4:79 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A77067C3F78B13BD7FA680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/93dfc3bb-6270-37ee-84a7-28f137075c1e.roa Signing time: Fri 20 Jun 2025 09:29:52 +0000 ROA not before: Fri 20 Jun 2025 09:29:52 +0000 ROA not after: Thu 18 Sep 2025 09:29:52 +0000 asID: 22773 IP address blocks: 68.108.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:70:67:c3:f7:8b:13:bd:7f:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:29:52 2025 GMT Not After : Sep 18 09:29:52 2025 GMT Subject: CN=9e880833-6f21-4bb1-9f33-6a55306c0b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4b:81:fe:33:2c:bc:d3:1d:f1:eb:51:ce:cf: 38:e6:9f:7a:f7:f7:d9:a4:e9:8a:08:e5:d0:55:2d: 47:9b:49:88:43:9a:d8:ea:d4:a3:36:3f:0a:82:0e: d9:e4:6c:80:de:9c:c0:6f:5d:38:57:b1:a3:c9:07: d3:eb:03:82:b4:10:86:02:1e:38:3f:ff:d1:97:20: 8f:97:3a:a4:13:5f:b8:26:ef:bd:1c:96:e6:11:90: 70:20:8d:7e:73:2a:64:0f:c0:55:bb:e6:3a:fa:97: 29:9e:fe:da:49:71:fb:25:1c:d3:db:67:37:fa:12: be:ea:68:4a:71:da:80:1e:3f:15:a8:20:1d:a4:b9: b1:0e:84:ca:14:c4:0d:dd:31:69:20:d1:98:a1:87: 4c:b3:a2:cf:ee:20:2b:39:f6:64:8b:40:00:ed:78: d3:44:71:10:17:88:d4:b8:03:f5:17:a3:85:85:15: 75:11:e1:26:52:ba:30:a0:c3:7c:91:69:23:c9:2d: 76:02:e6:fc:2f:70:97:5f:33:df:c3:93:6c:c7:69: 34:31:33:f7:cd:84:a6:a6:b8:11:35:a0:42:8a:7c: c2:16:93:9b:8d:fe:a4:ac:e7:94:05:6c:8a:bc:fa: cf:70:60:64:d2:33:c0:6c:ac:2f:16:ea:75:38:3a: a6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:7B:19:5E:B2:E0:99:B2:F6:50:E1:53:EC:BF:BA:B0:85:94:F4:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/93dfc3bb-6270-37ee-84a7-28f137075c1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:e7:53:95:c1:2a:6d:0b:fb:b7:53:b3:19:9d:3c:3f:1f:c8: 35:bd:ee:d6:55:e0:20:3d:7d:59:d5:36:39:a5:41:5b:f0:92: d3:c6:f1:64:1d:a4:e0:fd:bc:c1:57:5e:11:74:f8:a3:ba:76: 08:85:48:63:b1:5f:c6:86:ba:33:be:4f:68:a1:44:bb:fd:8d: ca:da:32:6c:b1:7b:19:e3:bd:56:a5:38:aa:5e:5a:3d:ad:66: 1e:67:b5:6a:2f:ca:89:71:ad:82:94:9b:23:99:b6:9a:fa:e4: fa:1b:06:f5:d9:dc:3c:ee:fe:a5:51:11:ae:fa:59:94:3f:28: 9c:af:fa:26:40:be:a6:17:ee:2d:27:6f:16:f0:07:9f:1b:24: 75:0b:c6:71:34:d9:f9:fa:39:14:e7:b0:53:99:30:b7:de:db: 48:8d:1c:b2:ec:ff:48:e1:5f:88:7b:e5:c8:7c:a8:73:cd:9d: 63:84:d4:25:9c:10:5a:e9:4b:07:1b:35:ed:1e:b5:a2:4f:d8: 08:16:64:5a:cf:c2:60:be:4b:8e:06:2a:c5:eb:db:c7:14:2e: a8:6c:2a:a1:40:d9:fa:35:80:2e:92:fc:c1:65:f0:80:43:49: d3:25:ec:f6:ea:99:24:f0:15:96:4a:3c:42:c7:aa:e5:f0:43: 66:33:15:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp3Bnw/eLE71/poAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5Mjk1MloXDTI1MDkxODA5Mjk1MlowLzEtMCsGA1UEAxMk OWU4ODA4MzMtNmYyMS00YmIxLTlmMzMtNmE1NTMwNmMwYjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0uB/jMsvNMd8etRzs845p969/fZpOmKCOXQ VS1Hm0mIQ5rY6tSjNj8Kgg7Z5GyA3pzAb104V7GjyQfT6wOCtBCGAh44P//RlyCP lzqkE1+4Ju+9HJbmEZBwII1+cypkD8BVu+Y6+pcpnv7aSXH7JRzT22c3+hK+6mhK cdqAHj8VqCAdpLmxDoTKFMQN3TFpINGYoYdMs6LP7iArOfZki0AA7XjTRHEQF4jU uAP1F6OFhRV1EeEmUrowoMN8kWkjyS12Aub8L3CXXzPfw5Nsx2k0MTP3zYSmprgR NaBCinzCFpObjf6krOeUBWyKvPrPcGBk0jPAbKwvFup1ODqmRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBV7GV6y4Jmy9lDhU+y/urCFlPR5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTNkZmMzYmItNjI3MC0z N2VlLTg0YTctMjhmMTM3MDc1YzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGyKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETnU5XBKm0L+7dTsxmdPD8fyDW97tZV4CA9fVnVNjmlQVvwktPG8WQd pOD9vMFXXhF0+KO6dgiFSGOxX8aGujO+T2ihRLv9jcraMmyxexnjvValOKpeWj2t Zh5ntWovyolxrYKUmyOZtpr65PobBvXZ3Dzu/qVREa76WZQ/KJyv+iZAvqYX7i0n bxbwB58bJHULxnE02fn6ORTnsFOZMLfe20iNHLLs/0jhX4h75ch8qHPNnWOE1CWc EFrpSwcbNe0etaJP2AgWZFrPwmC+S44GKsXr28cULqhsKqFA2fo1gC6S/MFl8IBD SdMl7PbqmSTwFZZKPELHquXwQ2YzFQE= -----END CERTIFICATE-----Generated at Wed Jul 2 07:22:23 2025 by rpki-client